Static task
static1
Behavioral task
behavioral1
Sample
6a00e64c70d26c7a03a5722bb00456ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a00e64c70d26c7a03a5722bb00456ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a00e64c70d26c7a03a5722bb00456ce_JaffaCakes118
-
Size
66KB
-
MD5
6a00e64c70d26c7a03a5722bb00456ce
-
SHA1
75e489ddb8b25155a9bba612a3fbecc470713f8a
-
SHA256
a936f9aff108fcb9380d312e1e96ca01d40160dc126795a613c9f369a2381ea6
-
SHA512
c6638bb0be19fbc28ddcdedfdb8307f9108c74bf1b84073798121391c4111ce188ab4d512857fbc5c03bdc893a25afb3af527c90b5e021071d379ba08fcd9d02
-
SSDEEP
1536:uVIOy4Dgz44k+Z/6qn0C9QbvCs2agD/XIrBV19qaCCetv5hiF2:uVdlDgs4D/6ItWTpG5hI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a00e64c70d26c7a03a5722bb00456ce_JaffaCakes118
Files
-
6a00e64c70d26c7a03a5722bb00456ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
046c3f8798c823f7aca03c1909f0e366
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumUILanguagesA
CreateProcessW
InitAtomTable
SetFileTime
SetCommBreak
GetExpandedNameA
LocalShrink
WriteConsoleInputW
GlobalUnfix
ScrollConsoleScreenBufferW
EnumLanguageGroupLocalesA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE